windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Internet Download Manager 6.28 Build 17 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

2017-08-15 f3ci local

ALLPlayer 7.4 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

2017-08-15 f3ci local

Quali CloudShell 7.1.0.6508 (Patch 6) – Persistent Cross-Site Scripting

# Vulnerability type: Multiple Stored Cross Site Scripting

2017-08-14 Benjamin Lee webapps

Tomabo MP4 Converter 3.19.15 – Denial of Service

#!/usr/bin/python

2017-08-13 Andy Bowden dos

Red-Gate SQL Monitor < 3.10 / 4.2 - Authentication Bypass

# Exploit Title: Red-Gate SQL Monitor authentication bypass

2017-08-10 Paul Taylor webapps

VMware WorkStation 12.5.5 – Virtual Machine Escape

# VMware Escape Exploit

2017-08-08 unamer local

Microsoft Windows – ‘.LNK’ Shortcut File Code Execution

#!/usr/bin/python

2017-08-06 nixawk local

Dashlane – DLL Hijacking

## Vulnerability Summary

2017-08-03 SecuriTeam local

VirtualBox 5.1.22 – Windows Process DLL UNC Path Signature Bypass Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1296

2017-08-03 Google Security Research local

VirtualBox 5.1.22 – Windows Process DLL Signature Bypass Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1257

2017-08-03 Google Security Research local

Nitro Pro PDF Reader 11.0.3.173 – Javascript API Code Execution (Metasploit)

##

2017-08-02 Metasploit local

Solarwinds Kiwi Syslog 9.6.1.6 – Denial of Service

# Exploit Title: Solarwinds Kiwi Syslog 9.6.1.6 - Remote Denial of Service (Type Mismatch)

2017-08-01 Guillaume Kaddouch dos

McAfee Security Scan Plus – Remote Command Execution

## Vulnerability Summary

2017-07-30 SecuriTeam remote

DiskBoss Enterprise 8.2.14 – Remote Buffer Overflow

#!/usr/bin/env python

2017-07-30 Ahmad Mahfouz remote

AudioCoder 0.8.46 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-07-26 Muhann4d local

Microsoft Windows – ‘.LNK’ Shortcut File Code Execution (Metasploit)

##

2017-07-26 Yorick Koster local

Nitro Pro PDF – Multiple Vulnerabilities

## Vulnerabilities Summary

2017-07-24 SecuriTeam local

Microsoft Windows Kernel – ‘IOCTL 0x120007 NsiGetParameter’ nsiproxy/netio Pool Memory Disclosure

We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys (\\.\Nsi device) discloses portions of unin...

2017-07-18 Google Security Research dos

Microsoft Internet Explorer 11.1066.14393.0 – VBScript Arithmetic Functions Type Confusion

2017-07-18 Google Security Research dos

Microsoft Internet Explorer 11.0.9600.18617 – ‘CMarkup::DestroySplayTree’ Memory Corruption

2)lt

2017-07-18 Google Security Research dos

FTPGetter 5.89.0.85 – Remote Buffer Overflow (SEH)

#!/usr/bin/python

2017-07-14 Paul Purcell remote

Firefox 50.0.1 – ASM.JS JIT-Spray Remote Code Execution

2017-07-14 Rh0 remote

OrientDB – Code Execution

## Vulnerability Summary

2017-07-13 SecuriTeam remote

CyberArk Viewfinity 5.5.10.95 – Local Privilege Escalation

# Exploit Title: Privilege Escalation via CyberArk Viewfinity

2017-07-13 geoda local

360 Total Security – Local Privilege Escalation

## Vulnerability Summary

2017-07-12 SecuriTeam remote

Skype for Business 2016 – Cross-Site Scripting

# Exploit Title: Skype for Business 2016 XSS Injection - CVE-2017-8550

2017-07-12 nyxgeek remote

Microsoft Windows 7/8.1/2008 R2/2012 R2/2016 R2 – ‘EternalBlue’ SMB Remote Code Execution (MS17-010)

#!/usr/bin/python

2017-07-11 sleepya remote

Pelco VideoXpert 1.12.105 – Information Disclosure

Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information

2017-07-10 LiquidWorm webapps

Pelco VideoXpert 1.12.105 – Directory Traversal

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal

2017-07-10 LiquidWorm webapps

Pelco VideoXpert 1.12.105 – Local Privilege Escalation

Schneider Electric Pelco VideoXpert Privilege Escalations

2017-07-10 LiquidWorm local

Easy File Sharing Web Server 7.2 – GET ‘PassWD’ Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2017-07-08 Sungchul Park remote

Counter Strike: Condition Zero – ‘.BSP’ Map File Code Execution

#!/usr/bin/env python

2017-07-07 Grant Hernandez local

Firefox 54.0.1 – Denial of Service

[+] Credits: John Page aka hyp3rlinx

2017-07-07 hyp3rlinx dos

Veritas/Symantec Backup Exec – SSL NDMP Connection Use-After-Free (Metasploit)

##

2017-06-29 Metasploit remote

Easy File Sharing Web Server 7.2 – Unrestricted File Upload

##################################

2017-06-28 Chako webapps

Easy File Sharing Web Server 7.2 – Account Import Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-06-28 Chako local

Microsoft MsMpEng – mpengine x86 Emulator Heap Corruption in VFS API

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1282&desc=2

2017-06-27 Google Security Research dos

Easy File Sharing Web Server 7.2 – GET ‘PassWD’ Remote Buffer Overflow (SEH)

#!/usr/bin/python

2017-06-27 clubjk remote